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Claims 

[d] 1. A method for a transaction source and a transaction 
target to exchange a transaction that cannot be repudi- 
ated, the method comprising: 

(a) receiving a first request for a transaction identifier 
to identify the transaction, wherein said request in- 
cludes a source authentication assertion; 

(b) verifying said source authentication assertion; 

(c) storing said transaction identifier and information 
from said source authentication assertion, thereby 
establishing information making the transaction 
source unable to plausibly repudiate once it encrypts 
and sends the transaction; 

(d) providing said transaction identifier in reply to 
said first request so that the transaction and said 
transaction identifier can be sent to the transaction 
target; 

(e) receiving a second request for a decryption key to 
decrypt the transaction once it has been received by 
the transaction target, wherein said second request 
includes said transaction identifier and a target au- 
thentication assertion; 

(f) verifying said target authentication assertion; 



(g) storing information from said target authentica- 
tion assertion with the transaction identifier; and 

(h) providing said decryption key in reply to said sec- 
ond request so that the transaction can be decrypted, 
thereby establishing information making the transac- 
tion target unable to plausibly repudiate being a re- 
cipient of the transaction. 

[c2] 2. The method of claim 1, wherein said step (d) includes 
also providing an encryption key to encrypt the transac- 
tion. 

[c3] 3. The method of claim 1, the method further compris- 
ing: 

(i) receiving an information request for source infor- 
mation about the transaction source, wherein said 
information request includes said transaction identi- 
fier; 

(j) retrieving at least some of said information from 
said source authentication assertion stored in said 
step (c) with said transaction identifier and determin- 
ing said source information therefrom; and 
(k) providing said source information in reply to said 
information request. 

[c4] 4. The method of claim 1, the method further compris- 
ing: 



(i) receiving an information request for target infor- 
mation, wherein said information request includes 
said transaction identifier and information identifying 
the transaction target; 

(j) determining if said information identifying the 
transaction target matches with any said information 
from said target authentication assertion stored with 
the transaction identifier stored in said step (g) and 
determining said target information therefrom; and 
(k) providing said target information in reply to said 
information request. 

5. A method for establishing a transaction as nonrepudi- 
ate able by a transaction source that is the origin of the 
transaction, the method comprising: 

(a) receiving a request for a transaction identifier to 
identify the transaction, wherein said request in- 
cludes a source authentication assertion; 

(b) verifying said source authentication assertion; 

(c) storing said transaction identifier and information 
from said source authentication assertion; and 

(d) providing said transaction identifier in reply to 
said request, thereby establishing information mak- 
ing the transaction source unable to plausibly repu- 
diate being the origin of the transaction. 



[c6] 6. The method of claim 5, wherein said step (d) includes 
also providing an encryption key to encrypt the transac- 
tion. 

[c7] 7. The method of claim 5, the method further compris- 
ing: 

(e) receiving an information request for source infor- 
mation about the transaction source, wherein said 
information request includes said transaction identi- 
fier; 

(f) retrieving at least some of said information from 
said source authentication assertion stored in said 
step (c) with said transaction identifier and determin- 
ing said source information therefrom; and 

(g) providing said source information in reply to said 
information request. 

[c8] 8. The method of claim 7, wherein said source informa- 
tion indicates who the transaction source actually is. 

[c9] g. The method of claim 7, wherein: 

said information request received in said step (e) also 
includes information identifying a party believed to 
be the transaction source; and 
said source information provided in said step (g) in- 
dicates merely whether said party is the transaction 
source, thereby responding to said information re- 



quest without specifically identifying the transaction 
source. 



[do] 10. The method of claim 7, wherein: 

said step (c) includes also storing a decryption key 
usable to decrypt the transaction; and 
said step (g) includes also providing said decryption 
key, thereby facilitating decryption of the transaction 
by a party making said information request even 
when said party is not the transaction source or a 
target of the transaction. 

[cH] 11. The method of claim 7, wherein: 

said information request received in said step (e) also 
includes the transaction; and 

said step (g) includes decrypting the transaction be- 
fore providing said source information in reply to 
said information request. 

[d2] 12. The method of claim 11, wherein: 

said information request received in said step (e) also 
includes information identifying a party believed to 
be the transaction source; and 
said source information provided in said step (g) in- 
dicates merely whether said party is the transaction 
source, thereby responding to the second request 
without specifically identifying the transaction 



source. 



[d3] 13. The method of claim 11, wherein said step (g) in- 
cludes also providing the transaction in decrypted form 
in said reply to said information request, thereby facili- 
tating a party making said information request being 
able to confirm the content of the transaction even when 
said party is not the transaction source or a target of the 
transaction. 

[d4] 14. a method for establishing a transaction as nonrepu- 
diate able by a transaction target that is a recipient of 
the transaction, wherein a transaction identifier identify- 
ing the transaction and a decryption key usable to de- 
crypt the transaction have been pre-stored, the method 
comprising: 

(a) receiving a request for the decryption key, 
wherein said request includes the transaction identi- 
fier and a target authentication assertion; 

(b) verifying said target authentication assertion; 

(c) storing information from said target authentica- 
tion assertion with the transaction identifier; and 

(d) providing the decryption key in reply to said re- 
quest, thereby establishing information making the 
transaction target unable to plausibly repudiate be- 
ing a recipient of the transaction. 



[d5] 15. The method of claim 14, the method further com- 
prising: 

(e) receiving an information request for target infor- 
mation, wherein said information request includes 
said transaction identifier and information identifying 
the transaction target; 

(f) retrieving at least some of said information from 
said target authentication assertion stored in said 
step (c) with said transaction identifier and determin- 
ing said target information therefrom; and 

(g) providing said target information in reply to said 
information request. 

[d6] 16. The method of claim 15, wherein: 

said step (g) includes also providing said decryption 
key, thereby facilitating decryption of the transaction 
by a party making said information request even 
when said party is not the transaction source or a 
transaction target. 

[d7] 17. The method of claim 15, wherein: 

said information request received in said step (e) also 
includes the transaction; and 

said step (g) includes decrypting the transaction be- 
fore providing said identity information. 



[d8] 18. The method of claim 17, wherein said step (g) in- 



eludes also providing the transaction in decrypted form 
in said reply to said information request, thereby facili- 
tating a party making said information request being 
able to confirm the content of the transaction even when 
said party is not the transaction source or a transaction 
target. 

[d9] 19. a system for a transaction source and a transaction 
target to exchange a transaction that cannot be repudi- 
ated, comprising: 

a computerized key server; 

said key server suitable for receiving a first request 
via a network for a transaction identifier to identify 
the transaction, wherein said first request includes a 
source authentication assertion; 
said key server suitable for receiving a second re- 
quest via said network for a decryption key usable to 
decrypt the transaction, wherein said second request 
includes said transaction identifier and a target au- 
thentication assertion; 

said key server suitable for verifying said source au- 
thentication assertion and said target authentication 
assertion; 

said key server suitable for storing said transaction 
identifier, information from said source authentica- 
tion assertion, and information from said target au- 



thentication in association in a database; 
said key server suitable for providing a first reply to 
said first request via said network that includes said 
transaction identifier; and 

said key server suitable for providing a second reply 
to said second request via said network that includes 
said decryption key, thereby establishing information 
making the transaction source unable to plausibly 
repudiate once it encrypts and sends the transaction 
and also making the transaction target unable to 
plausibly repudiate once it is provided said decryp- 
tion key. 

[c20] 20. The system of claim 19, wherein said key server is 
further suitable for providing an encryption key to en- 
crypt the transaction in said first reply. 

[c21] 21. The system of claim 19, wherein: 

said key server is further suitable for receiving an in- 
formation request for source information about the 
transaction source, wherein said information request 
includes said transaction identifier; 
said key server is further suitable for retrieving said 
information from said source authentication asser- 
tion stored with said transaction identifier from said 
database and determining said source information 
therefrom; and 



said key server is further suitable for providing said 
source information in reply to said information re- 
quest. 

[c22] 22. The system of claim 19, wherein: 

said key server is further suitable for receiving an in- 
formation request for target, wherein said informa- 
tion request includes said transaction identifier and 
information identifying the transaction target; 
said key server is further suitable for determining if 
said information identifying the transaction target 
matches with any said information from said target 
authentication assertion stored with the transaction 
identifier and determining said target information 
therefrom; and 

said key server is further suitable for providing said 
target information in reply to said information re- 
quest. 

[c23] 23. A system for establishing a transaction as nonrepu- 
diate able by a transaction source that is the origin of 
the transaction, comprising: 
a computerized key server; 

said key server suitable for receiving a request via a 
network for a transaction identifier to identify the 
transaction, wherein said request includes a source 
authentication assertion; 



said key server suitable for verifying said source au- 
thentication assertion; 

said key server suitable for storing said transaction 
identifier and information from said source authenti- 
cation assertion in a database; and 
said key server suitable for providing a reply via said 
network that includes said transaction identifier, 
thereby establishing information making the transac- 
tion source unable to plausibly repudiate once it en- 
crypts and sends the transaction. 

[c24] 24. The system of claim 23, wherein said key server is 
further suitable for providing an encryption key to en- 
crypt the transaction in said reply. 

[c25] 25. The system of claim 23, wherein: 

said key server is further suitable for receiving an in- 
formation request for source information about the 
transaction source, wherein said information request 
includes said transaction identifier; 
said key server is further suitable for retrieving infor- 
mation from said source authentication assertion 
stored with said transaction identifier from said 
database, and determining said source information 
therefrom; and 

said key server is further suitable for providing said 
source information in reply to said information re- 



quest. 



[c26] 26. A system for establishing a transaction as nonrepu- 
diate able by a transaction target that is a recipient of 
the transaction, wherein a transaction identifier identify- 
ing the transaction and a decryption key usable to de- 
crypt the transaction have been pre-stored in a 
database, comprising: 

a computerized key server; 

said key server suitable for receiving a request via a 
network for the decryption key, wherein said request 
includes the transaction identifier and a target au- 
thentication assertion; 

said key server suitable for verifying said target au- 
thentication assertion; 

said key server suitable for storing information from 
said target authentication assertion with the transac- 
tion identifier in the database; and 
said key server suitable for providing a reply via said 
network that includes the decryption key, thereby es- 
tablishing information making the transaction target 
unable to plausibly repudiate. 

[o2.7] 27. The system of claim 26, wherein: 

said key server is further suitable for receiving an in- 
formation request for target information, wherein 
said information request includes said transaction 



identifier and information identifying the transaction 
target; 

said key server is further suitable for retrieving at 
least some of said information from said target au- 
thentication assertion stored with said transaction 
identifier and determining said target information 
therefrom; and 

said key server is further suitable for providing said 
target information in reply to said information re- 
quest. 



